kubernetes/cmd
Kubernetes Submit Queue bf111161b7
Merge pull request #57973 from dims/set-pids-limit-at-pod-level
Automatic merge from submit-queue (batch tested with PRs 57973, 57990). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Set pids limit at pod level

**What this PR does / why we need it**:

Add a new Alpha Feature to set a maximum number of pids per Pod.
This is to allow the use case where cluster administrators wish
to limit the pids consumed per pod (example when running a CI system).

By default, we do not set any maximum limit, If an administrator wants
to enable this, they should enable `SupportPodPidsLimit=true` in the
`--feature-gates=` parameter to kubelet and specify the limit using the
`--pod-max-pids` parameter.

The limit set is the total count of all processes running in all
containers in the pod.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #43783

**Special notes for your reviewer**:

**Release note**:

```release-note
New alpha feature to limit the number of processes running in a pod. Cluster administrators will be able to place limits by using the new kubelet command line parameter --pod-max-pids. Note that since this is a alpha feature they will need to enable the "SupportPodPidsLimit" feature.
```
2018-01-25 18:29:31 -08:00
..
clicheck Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
cloud-controller-manager uniquify resource lock identities 2018-01-18 11:31:43 -05:00
controller-manager/app/options Seperate loop and plugin control 2017-12-18 10:58:45 -08:00
gendocs Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
genkubedocs Merge pull request #53631 from dixudx/enforce_cobra_required_flags 2018-01-18 02:00:27 -08:00
genman Fix scheduler refs in BUILD files. 2018-01-05 15:05:01 -08:00
genswaggertypedocs Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
genutils Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
genyaml Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
gke-certificates-controller Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
hyperkube low hanging fruit for using cobra commands 2018-01-17 13:43:43 -05:00
importverifier Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
kube-apiserver generated 2018-01-23 14:11:49 -05:00
kube-controller-manager Merge pull request #58791 from mikedanese/jwt0 2018-01-25 14:06:37 -08:00
kube-proxy Merge pull request #58378 from chentao1596/delete-redundant-symbols 2018-01-25 17:09:34 -08:00
kube-scheduler Merge pull request #58302 from deads2k/controller-05-id 2018-01-25 11:29:40 -08:00
kubeadm Support out-of-tree / external cloud providers 2018-01-22 09:04:45 -05:00
kubectl low hanging fruit for using cobra commands 2018-01-17 13:43:43 -05:00
kubelet Merge pull request #57973 from dims/set-pids-limit-at-pod-level 2018-01-25 18:29:31 -08:00
kubemark Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
linkcheck Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
BUILD Fix scheduler refs in BUILD files. 2018-01-05 15:05:01 -08:00
OWNERS Updated top level owners file to match new format 2017-01-19 11:29:16 -08:00